Package: freeipa-client Version: 4.9.8-1~bpo11+1 Severity: important X-Debbugs-Cc: gabr...@ifrtech.net
Dear Maintainer, freeipa-client depends on the libnss-myhostname package to properly enroll a host. On a minimal install of Debian Bullseye, with the bullseye-backports repository enabled, this is not a dependency. This causes an error in ipa-client-install, as shown below. Steps to reproduce: * Install Debian Bullseye from ISO. Selected options were BIOS boot, guided partitioning (all in one root), and "standard system utilites" selected for software. * Login as root. Run the following: - apt update - apt install software-properties-common - add-apt-repository "deb http://deb.debian.org/debian bullseye-backports main contrib non-free" - apt update - apt install realmd - hostnamectl set-hostname debian.ipa.example.com - realm join -U jdoe ipa.example.com Expected result: Debian machine will be joined to realm. Actual result: Realm operation fails. journalctl shows [identifying information redacted]: ``` Mar 05 17:40:41 debian.ipa.example.com realmd[1851]: * Resolving: _ldap._tcp.ipa.example.com Mar 05 17:40:41 debian.ipa.example.com realmd[1851]: * Performing LDAP DSE lookup on: 1.2.3.4 Mar 05 17:40:41 debian.ipa.example.com realmd[1851]: * Successfully discovered: ipa.example.com Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: * Unconditionally checking packages Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: * Resolving required packages Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: * LANG=C /usr/sbin/ipa-client-install --domain ipa.example.com --realm IPA.EXAMPLE.COM --mkhomedir --enable-dns-updates --unattended --force-join --principal jdoe -W --force-ntpd Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: Traceback (most recent call last): Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: File "/usr/sbin/ipa-client-install", line 22, in <module> Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: from ipaclient.install import ipa_client_install Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: File "/usr/lib/python3/dist-packages/ipaclient/install/ipa_client_install.py", line 7, in <module> Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: from ipaclient.install import client Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: File "/usr/lib/python3/dist-packages/ipaclient/install/client.py", line 37, in <module> Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: from ipalib import api, errors, x509 Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: File "/usr/lib/python3/dist-packages/ipalib/__init__.py", line 919, in <module> Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: from ipalib import plugable Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: File "/usr/lib/python3/dist-packages/ipalib/plugable.py", line 42, in <module> Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: from ipalib import errors Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: File "/usr/lib/python3/dist-packages/ipalib/errors.py", line 109, in <module> Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: from ipalib.text import ngettext as ungettext Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: File "/usr/lib/python3/dist-packages/ipalib/text.py", line 139, in <module> Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: from ipalib.request import context Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: File "/usr/lib/python3/dist-packages/ipalib/request.py", line 28, in <module> Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: from ipalib.base import ReadOnly, lock Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: File "/usr/lib/python3/dist-packages/ipalib/base.py", line 26, in <module> Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: from ipalib.constants import NAME_REGEX, NAME_ERROR Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: File "/usr/lib/python3/dist-packages/ipalib/constants.py", line 34, in <module> Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: FQDN = gethostfqdn() Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: File "/usr/lib/python3/dist-packages/ipapython/fqdn.py", line 21, in gethostfqdn Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: gai = socket.getaddrinfo( Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: File "/usr/lib/python3.9/socket.py", line 953, in getaddrinfo Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: for res in _socket.getaddrinfo(host, port, family, type, proto, flags): Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: socket.gaierror: [Errno -2] Name or service not known Mar 05 17:40:44 debian.ipa.example.com realmd[1851]: ! Running ipa-client-install failed ``` Resolution: * Install libnss-myhostname - apt install libnss-myhostname * Retry joining realm - realm join -U jdoe ipa.example.com * Realm join succeeds. -- System Information: Debian Release: 11.2 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 5.10.0-11-amd64 (SMP w/4 CPU threads) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages freeipa-client depends on: ii bind9-dnsutils [dnsutils] 1:9.16.22-1~deb11u1 ii bind9-utils 1:9.16.22-1~deb11u1 ii certmonger 0.79.13-3 ii curl 7.74.0-1.3+deb11u1 ii freeipa-common 4.9.8-1~bpo11+1 ii krb5-user 1.18.3-6+deb11u1 ii libc6 2.31-13+deb11u2 ii libcom-err2 1.46.2-2 ii libcurl4 7.74.0-1.3+deb11u1 ii libini-config5 0.6.1-2 ii libjansson4 2.13.1-1.1 ii libk5crypto3 1.18.3-6+deb11u1 ii libkrb5-3 1.18.3-6+deb11u1 ii libldap-2.4-2 2.4.57+dfsg-3 ii libnss-sss 2.4.1-2 ii libnss3-tools 2:3.61-1+deb11u2 ii libpam-sss 2.4.1-2 ii libpopt0 1.18-2 ii libsasl2-modules-gssapi-mit 2.1.27+dfsg-2.1+deb11u1 ii libssl1.1 1.1.1k-1+deb11u1 ii libsss-sudo 2.4.1-2 ii oddjob-mkhomedir 0.34.6-1 ii python3 3.9.2-3 ii python3-dnspython 2.0.0-1 ii python3-gssapi 1.6.1-1+b3 ii python3-ipaclient 4.9.8-1~bpo11+1 ii python3-ldap 3.2.0-4+b3 ii python3-sss 2.4.1-2 ii sssd 2.4.1-2 Versions of packages freeipa-client recommends: pn chrony <none> Versions of packages freeipa-client suggests: pn libpam-krb5 <none> -- no debconf information